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AMENDMENTS TO THE CLAIMS 
This listing of claims will replace all prior versions and listings of claims in the application. 
Listing of Claims: 

Claim 1 (Currently Amended): A method for enabling secure communication between a 
client on an open network and a server apparatus on a secure network, the method performed on 
an. intermediary apparatus coupled to the secure network and the open network, comprising: 
negotiating a secure communications session with the client apparatus via the open 
network; 

negotiating an open communications session with lie server via the secure network; 

receiving encrypted packet application data for a security record spanning multiple data 
packets, wherein the security record has having a length greater than a packet length associated 
with the v ia multiple data packets; 

decrypting the encrypted packet application data in cadi data packet; 

forwarding decrypted, unauthenticated application data to the server via the secure 
network; 

discarding at least a portion of the decrypted, unauthenticated packet application data for 
the security record prior to receiving a final packet of the security record; and 

authenticating the decrypted packet data the security record o n receipt of the a final 
packet of the security record segment 

Claim 2 (Currently Amended): The method of claim 1 wherein aaid otcp of forwarding 
includes: 

forwarding data which spans over multiple TCP segments- 
Claim 3 Cancelled. 
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Claim 4 (Currently Amended): The method of claim I[[2]J 

wherein said a remaining portion of the packet application d ata for the security record is 
buffered as for a minimal length sufficient to complete a block cipher used to encrypt the data. 

Claim 5 (Currently Amended): The method of claim 1[[2]] wherein s aid s tep of forwarding 
authenticating i ncludes authenticating the decrypted data for the security record upon receiving 
after a final TCP segment of a multi-segment encrypted data stream and after forwarding the 
decrypted, unauthenticated application data received prior to the final TCP segment is received . 

Claim 6 (Currently Amended): The method of claim l[[5]] further including t h e a top of 
after forwarding the decrypted* unauthenticated application data to the server, notifying the client 
apparatus if a failure in said s tep of authenticating the security record occurs. 

Claim 7 (Currently Amended): A method for processing encrypted data transferred 
between a first system and a second system, comprising: 

providing an accelerator device including a decryption engine in communication with the 
first system via an open network and the second system via a secure network; 

receiving encrypted data from the first system via the open network in the form of 
application data spanning multiple packets, each packet having a packet length and wherein a last 
packet of the multiple packets includes information for authenticating the application data; 

decrypting oneo of said the application data contained within the multiple p ackets as said 
the multiple p ackets are received; 

forwarding the decrypted application data as said the multiple p ackets are decrypted to 
the second device via the secure network; 

buffering a portion of the decrypted application data and discarding a remaining portion ; 

and 

authenticating the application data when sdkh^information for authenticating the 
a pplication data is received in the a last of the safe multiple packets. 
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Claim 8 (Currently Amended): The method of claim 7 wherein said step of receiving 
comprises receiving SSL encrypted data 

Claim 9 (Currently Amended): The method of claim 7 wherein 3aid step o f decrypting 
comprises decrypting application data encrypted using SSL and a DES algorithm. 

Claims 10- 11 Cancelled 

Claim 12 (Currently Amended): The method of claim 7[[1 1 ]] wherein said atcp of buffering 
comprises buffering the application d ata for a minimal length sufficient to perform complete a 
block cipher used to encrypt the data. 

Claim 13 (Original): The method of claim 12 wherein said block cipher is a form of DES. 

Claim 1 4 (Currently Amended): The method of claim 7 wherein said stop of authenticating 
includes alerting the first device if s aid 3tcp of authenticating fails after forwarding the decrypted, 
unauthenticated application data that is received prior to the last one of the multiple packets . 

Claim 1 5 (Currently Amended): The method of claim 7 wherein said step of authenticating 
includes generating a reset to the second device is if said step-ef authenticating fails. 

Claim 16 (Currently Amended): A method of providing secure communications using 
limited buffer memory in a jin s ecur e sockets layer processing device, comprising: 

receiving SSfc encrypted data having a length greater than a TCP segment carrying said 

data; 

buffering the SSfc encrypted data in a memory buffer in the SSL accelera t or device, the 
buffer having a length equivalent to #*he block cipher size necessary to perform the cipher; 

decrypting the buffered segment of the received SSfc encrypted data to provj de decrypted 
application data; and 

forwarding the decrypted application data to a destination device. 
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Claim 1 7 (Original): The method of claim 1 6 wherein the block cipher is 3DES. 

Claim 1 8 (Original): The method of claim 16 wherein the block cipher is DES- 

Claim 19 (Currently Amended): The method of claim 16 further including the atop of 
authenticating the data on receipt of a final segment of the encrypted data after forwarding the 
^authenticated application data that is received nrior to the final segment . 

Claim 20 (Currently Amended): The method of claim 19 further including the steps of 
generating an alert if said step of authenticating results in a failure. 
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